NetWitness Platform vs SolarWinds Security Event Manager
NetWitness Platform
netwitness.comSolarWinds Security Event Manager
solarwinds.comSide by side
| Figure | NetWitness Platform | SolarWinds Security Event Manager |
|---|---|---|
| Price from | — | $1,789/mo |
| Free plan | — | — |
| Free trial | — | Yes |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | Yes | Yes |
| macOS | Yes | — |
| Linux | Yes | — |
| API | Yes | — |
| Self-hosted | Yes | Yes |
| Plans published | 1 | 1 |
| Spec score · Security Information and Event Management | 8.0 (#9) | 7.6 (#12) |
| Spec score · SIEM Software | 8.0 (#11) | 7.6 (#16) |
| Deployment | The SIEM page lists on-premises, virtual, and cloud deployment, including AWS and Azure. | SEM is delivered as a virtual appliance and described by SolarWinds as an on-premise SIEM tool. |
| Founded | LinkedIn lists NetWitness as founded in 1997. | 1999 |
| Purpose | NetWitness is a threat detection, investigation, and response platform for complex IT and OT environments. | SEM is an on-premise SIEM for collecting, storing, analyzing, and reporting logs to help IT teams identify cyberthreats and demonstrate compliance. |
| Support | NetWitness says it offers multiple levels of technical support and a customer community with Q&A, documentation, downloads, product updates, and training. | SolarWinds offers SEM self-led onboarding, product documentation, troubleshooting articles, training, and customer support plans. |
Plans
SolarWinds Security Event Manager
- Security Event Manager$1,789 a month
In their own words
NetWitness Platform
NetWitness Platform is a threat detection, investigation, and response platform for complex IT and OT environments. Its modules include network detection and response, endpoint detection and response, SIEM, SOAR, and UEBA, with additional OT security coverage described. NDR uses full packet capture and metadata analysis to monitor infrastructure and reconstruct sessions. Machine learning and behavioral analytics are described for identifying known and unknown threats and anomalous behavior, with real-time alerting. SIEM ingests logs from over 350 sources, including AWS, Azure, Office 365, and Salesforce, through Syslog, ODBC, SFTP, FTPS, and SNMP. It provides reporting templates and use cases for SOX, PCI, HIPAA, and NERC. SIEM can run on-premises, virtually, or in the cloud, including AWS and Azure. The EDR agent is described for hundreds to 100,000 endpoints with near-zero end-user impact. NetWitness is paid, supports Linux, self-hosted, and web deployments, and lists pricing on request.
SolarWinds Security Event Manager
SolarWinds Security Event Manager has no write-up on Specifiction yet; its figures are above.